Critical ICSA-18-270-02 2 CVEs

Fuji Electric Alpha5 Smart Loader (Update A)

Published Sep 27, 2018 · Updated Feb 7, 2019 · Revision 2

Vendor: Fuji Electric Product: Alpha5 Smart Loader

Summary

Successful exploitation of these vulnerabilities could allow for arbitrary remote code execution on the device.

Vulnerabilities 2

Unscored —

CVE-2018-14788

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs…

Fuji Electric Alpha5 Smart Loader

Oct 1, 2018
Unscored —

CVE-2018-14794

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a p…

Fuji Electric Alpha5 Smart Loader

Oct 1, 2018

Revision history

2019-02-07 #2
ICSA-18-270-02 Fuji Electric Alpha5 Smart Loader (Update A)
2018-09-27 #1
ICSA-18-270-02 Fuji Electric Alpha5 Smart Loader

References

ICS Advisory ICSA-18-270-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-270-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B